cjagwani a991b8e369 fix(sandbox): preserve exec capacity under failure and load (#4324) ...

* fix(sandbox): reclaim failed exec waits

Signed-off-by: Charan Jagwani <cjagwani@nvidia.com>

* test(e2e): cover exec recovery after policy denial

Signed-off-by: Charan Jagwani <cjagwani@nvidia.com>

* fix(sandbox): preserve live descriptor headroom

Signed-off-by: Charan Jagwani <cjagwani@nvidia.com>

* fix(sandbox): reclaim descriptors before exec

Signed-off-by: Charan Jagwani <cjagwani@nvidia.com>

* fix(sandbox): separate exec and socket capacity

Signed-off-by: Charan Jagwani <cjagwani@nvidia.com>

* fix(sandbox): stream Landlock baseline entries

Signed-off-by: Charan Jagwani <cjagwani@nvidia.com>

---------

Signed-off-by: Charan Jagwani <cjagwani@nvidia.com>

2026-10-09 01:26:31 +00:00

..

src

fix(sandbox): preserve exec capacity under failure and load (#4324)

2026-10-09 01:26:31 +00:00

Cargo.toml

fix(ssh): persist sandbox host identities (#4094)

2026-10-06 20:09:20 +00:00